nginx how too enable intel aesni engine

[Maxim Dounin]

Hello!

On Wed, Mar 09, 2011 at 12:44:47PM -0500, michaelvv wrote:

> I have Intel(R) Xeon(R) CPU E5620 based web-server.
> I have managed to patch the openssl ver 1.0.0 so i have support for the
> AES-NI engine.

[...]

> Under my ssl setup in nginx i have these lines
> 
>     ssl on;
>     ssl_certificate      /usr/local/nginx/conf/mysite.crt;
>     ssl_certificate_key  /usr/local/nginx/conf/mysite.key;
>     ssl_session_timeout  5m;
>     ssl_protocols  SSLv3;
>     #ssl_engine aesni;
>     ssl_ciphers AES256-SHA:1024:256:HIGH:!ADH:!MD5;
>     ssl_prefer_server_ciphers   on;
> 
> When i enable the line
> ssl_engine aesni;
> 
> I got an error
> [emerg]: unknown directive "ssl_engine" in
> /usr/local/nginx/conf/nginx.conf:66
> 
> How should i take advance on the aes-ni speedup ????

Directive "ssl_engine" is globabl one, it have to be used at main 
context.  I.e. outside of http{} block.

Maxim Dounin